Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3051/_APy-Wb2K_3GawQVYum6QAMtoJ4.mft
File: _APy-Wb2K_3GawQVYum6QAMtoJ4.mft (raw, json)
Hash identifier: uFKY3n518hDLkptLdalMLdZxnHluTswGLOkhXfVIbww=
Subject key identifier: 6B:BB:76:49:DC:D7:DA:21:A0:7D:B3:A6:1B:5E:61:60:4A:AD:14:99
Authority key identifier: FC:03:F2:F9:66:F6:2B:FD:C6:6B:04:15:62:E9:BA:40:03:2D:A0:9E
Certificate issuer: /CN=FC03F2F966F62BFDC66B041562E9BA40032DA09E
Certificate serial: 2165
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_APy-Wb2K_3GawQVYum6QAMtoJ4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3051/_APy-Wb2K_3GawQVYum6QAMtoJ4.mft
Manifest number: 215F
Signing time: Sat 23 Aug 2025 16:02:34 +0000
Manifest this update: Sat 23 Aug 2025 16:02:34 +0000
Manifest next update: Sat 23 Aug 2025 22:02:34 +0000
Files and hashes: 1: _APy-Wb2K_3GawQVYum6QAMtoJ4.crl (hash: osXHXEYHfM8Wpy8es+J+eWTOYGY7mhZoR8XynuFwDOc=)
2: uKdWCaEnVONu4fZr7N9srVNLqMU.roa (hash: bLAMgiyp/+z7wYa7NqzIhJJBnnzmKA4F9e4V4dRy4g4=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8549 (0x2165)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FC03F2F966F62BFDC66B041562E9BA40032DA09E
Validity
Not Before: Aug 23 16:02:34 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=6BBB7649DCD7DA21A07DB3A61B5E61604AAD1499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c5:1f:a3:40:9e:ad:bd:4a:db:7b:e9:45:00:
93:7e:81:b8:fe:f0:3b:18:64:0f:5d:24:a9:3e:c5:
e4:6f:72:06:04:ed:37:4e:0c:3f:10:7e:d7:6a:9e:
c3:c7:89:4e:82:d5:e2:bf:58:b0:12:e4:c9:4e:af:
e8:db:b5:fa:af:bc:47:f8:d9:ec:22:38:41:0d:ca:
65:97:c4:af:04:8b:30:54:a8:ce:63:4d:f5:74:cb:
77:7a:1b:ae:b7:11:38:8c:a4:80:70:4c:61:4f:38:
b3:07:03:91:9f:97:d9:83:ac:4d:e3:38:7e:99:11:
6c:2e:09:ba:c0:05:a6:43:7c:77:65:a9:78:05:63:
a2:83:88:9c:4f:4d:a3:aa:92:e0:5c:64:a4:2a:37:
c5:2f:60:cf:58:7a:92:01:ac:c4:18:37:13:4f:ba:
3e:5e:63:8e:aa:1d:2b:dc:83:74:24:df:4b:e6:cf:
60:ae:6b:64:f7:f0:45:b2:9d:b1:10:5c:89:78:a7:
f6:6b:f9:78:08:2e:06:e7:fa:8e:17:3c:5c:ac:1e:
99:1b:a4:cf:0b:6a:18:e5:a7:c7:72:0a:32:9c:e5:
ef:e6:cd:1b:b1:71:5b:2f:7c:ea:a7:bf:d3:0d:a1:
37:cd:b6:f0:8e:f4:0b:eb:8b:a5:f6:0e:59:34:5a:
30:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:BB:76:49:DC:D7:DA:21:A0:7D:B3:A6:1B:5E:61:60:4A:AD:14:99
X509v3 Authority Key Identifier:
keyid:FC:03:F2:F9:66:F6:2B:FD:C6:6B:04:15:62:E9:BA:40:03:2D:A0:9E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3051/_APy-Wb2K_3GawQVYum6QAMtoJ4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_APy-Wb2K_3GawQVYum6QAMtoJ4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3051/_APy-Wb2K_3GawQVYum6QAMtoJ4.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bc:ae:de:05:ce:2c:37:9d:6c:70:66:3c:16:68:a4:78:07:f1:
ad:04:1a:85:9e:36:84:b9:7e:76:2f:bc:d9:5b:d6:b6:de:da:
49:ba:7f:b2:bb:5e:32:0d:e9:1c:ba:9f:a6:fd:9c:f1:9a:b3:
6f:e5:2e:65:3f:53:ad:44:09:30:bf:b9:bc:ac:64:1d:ad:2f:
9b:28:ec:f9:c6:5c:48:c6:01:ce:91:58:b9:be:3c:80:89:c3:
b6:26:37:06:18:71:44:62:d2:4d:68:35:68:d1:dd:3a:2f:e4:
25:b4:28:b3:ad:f5:7b:8f:ec:35:ec:ee:60:4b:7e:1b:58:19:
69:28:43:ea:b4:1a:b6:9f:f4:4b:7d:85:ae:17:f1:d7:29:7f:
42:66:20:62:34:9e:06:66:4a:e7:d8:2d:05:43:0d:d1:cd:03:
26:db:ca:12:cb:1a:c2:4c:d4:09:8c:26:c8:34:8e:6d:61:03:
73:35:ca:8b:b0:42:1f:94:00:ed:29:9b:ff:8f:80:af:78:a7:
c5:66:20:56:86:32:b4:7f:0e:c1:3b:22:dd:7e:7e:3b:54:f1:
7f:49:ad:ac:55:ae:2e:5b:6e:a1:bd:77:c6:89:4f:a7:8a:7f:
ab:33:2b:cb:d5:28:cc:56:b6:e9:6a:9b:86:5c:72:9e:d5:aa:
50:22:d0:b5
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICIWUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkMw
M0YyRjk2NkY2MkJGREM2NkIwNDE1NjJFOUJBNDAwMzJEQTA5RTAeFw0yNTA4MjMx
NjAyMzRaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDZCQkI3NjQ5RENEN0RB
MjFBMDdEQjNBNjFCNUU2MTYwNEFBRDE0OTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC2xR+jQJ6tvUrbe+lFAJN+gbj+8DsYZA9dJKk+xeRvcgYE7TdO
DD8QftdqnsPHiU6C1eK/WLAS5MlOr+jbtfqvvEf42ewiOEENymWXxK8EizBUqM5j
TfV0y3d6G663ETiMpIBwTGFPOLMHA5Gfl9mDrE3jOH6ZEWwuCbrABaZDfHdlqXgF
Y6KDiJxPTaOqkuBcZKQqN8UvYM9YepIBrMQYNxNPuj5eY46qHSvcg3Qk30vmz2Cu
a2T38EWynbEQXIl4p/Zr+XgILgbn+o4XPFysHpkbpM8Lahjlp8dyCjKc5e/mzRux
cVsvfOqnv9MNoTfNtvCO9Avri6X2Dlk0WjAxAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUa7t2SdzX2iGgfbOmG15hYEqtFJkwHwYDVR0jBBgwFoAU/APy+Wb2K/3GawQV
Yum6QAMtoJ4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA1
MS9fQVB5LVdiMktfM0dhd1FWWXVtNlFBTXRvSjQuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL19BUHktV2IyS18zR2F3UVZZdW02UUFNdG9KNC5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwNTEvX0FQeS1XYjJLXzNH
YXdRVll1bTZRQU10b0o0Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBALyu3gXOLDedbHBmPBZopHgH8a0EGoWeNoS5fnYvvNlb1rbe2km6f7K7XjIN
6Ry6n6b9nPGas2/lLmU/U61ECTC/ubysZB2tL5so7PnGXEjGAc6RWLm+PICJw7Ym
NwYYcURi0k1oNWjR3Tov5CW0KLOt9XuP7DXs7mBLfhtYGWkoQ+q0Graf9Et9ha4X
8dcpf0JmIGI0ngZmSufYLQVDDdHNAybbyhLLGsJM1AmMJsg0jm1hA3M1youwQh+U
AO0pm/+PgK94p8VmIFaGMrR/DsE7It1+fjtU8X9JraxVri5bbqG9d8aJT6eKf6sz
K8vVKMxWtulqm4Zccp7VqlAi0LU=
-----END CERTIFICATE-----
Generated at Sat Aug 23 22:19:42 2025 by rpki-client